Is Sweezy Custom Progress Bar safe?

Question

Accepted Answer

Sweezy Custom Progress Bar is medium risk. Each time you open this extension's popup or interact with its progress-bar controls, a POST request is sent to Google Analytics 4 carrying a persistent UUID that was generated on install and never rotates. Dynamic analysis captured two requests with the same UUID across two separate popup loads, confirming that your interactions — which bars you select, custom colors you apply, new bars you add — are tagged to a fixed identifier linked to your browser install. The GA4 API secret used to authenticate these requests is base64-encoded in the extension source rather than stored server-side.

Is Sweezy Custom Progress Bar for Youtube™ safe?

Findings